Mainframe Logical Security Engineer

Kyndryl; Phoenix (AZ); On-site; USD 80,000 - 100,000; Full time

Benefits offered by this job

Employee learning programs

Diverse workplace culture

Volunteering opportunities

Job summary

Kyndryl is seeking a skilled security administrator based in Phoenix, Arizona to oversee RACF security across z/OS systems. You will manage user access controls, conduct compliance checks, and integrate security solutions for enhanced operation efficiency.

This role demands strong hands-on experience with RACF and the ability to analyze security incidents. Candidates with a background in financial services and knowledge of automation tools will be preferred. Join Kyndryl and grow your career in a diverse environment.

Qualifications

• Strong hands-on experience with RACF administration on z/OS.
• Deep knowledge of RACF profiles, classes, and dataset security.
• Experience with security reporting and audit tools.
• Strong understanding of z/OS security concepts.

Responsibilities

• Administer and maintain RACF security environment.
• Perform periodic access reviews, audits, and compliance checks.
• Analyze security logs for access violations.
• Support integration with Enterprise IAM solutions.

Skills

RACF administration on z/OS

User/group management

SMF data analysis

Security reporting

Education

Experience in banking or financial services

Tools

SIEM tools like Splunk or QRadar

Automation tools (REXX, Python)

Identity governance tools

Job description

Who We Are

At Kyndryl, we design, build, manage and modernize the mission‑critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Responsibilities

• Administer and maintain RACF security environment across z/OS systems

• Create, modify, and revoke:

• User IDs

• Groups

• Resource profiles

• Dataset and subsystem access permissions

• Implement and maintain least‑privilege access controls for:

• Datasets

• Applications (CICS, DB2, IMS, MQ)

• System resources

Security Controls & Compliance

• Configure and maintain security policies aligned with enterprise standards

• Perform periodic access reviews, audits, and compliance checks

• Support regulatory compliance (e.g., SOX, PCI, HIPAA where applicable)

• Implement data protection controls and access monitoring mechanisms

Monitoring & Incident Response

• Analyze security logs and reports:

• SMF records

• RACF reports

• SIEM alerts

• Investigate:

• Access violations

• Unauthorized access attempts

• Security incidents

• Troubleshoot and resolve:

• Authorization failures

• RACF‑related abends or access issues

Security Architecture & Integration

• Secure mainframe subsystems and integrations:

• CICS, DB2, IMS, MQ, TCP/IP, USS

• Support integration with:

• Enterprise IAM solutions

• Single Sign‑On (SSO) / MFA (where applicable)

• Define and maintain RACF classes, profiles, and rules for system‑wide protection

Encryption & Advanced Security

• Support:

• Digital certificates

• TLS/SSL configuration

• ICSF (crypto services) at a high level

Ensure secure key management and encryption practices

Your future at Kyndryl

Every position at Kyndryl offers a way forward to grow your career, from Junior System Administrator to Architect. We have opportunities for Cloud Hyperscalers that you won’t find anywhere else, including hands‑on experience, learning opportunities, and the chance to certify in all four major platforms. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.

Kyndryl currently does not require employees to be fully vaccinated against COVID‑19; however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID‑19 vaccination policies. Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.

Who You Are

Required Qualifications

• Strong hands‑on experience with:

• RACF administration on z/OS

• Deep knowledge of:

• RACF profiles, classes, and dataset security

• User/group management and access control models

• Experience with:

• SMF data analysis

• Security reporting and audit tools

• Strong understanding of:

• z/OS security concepts and system internals

Preferred Experience

• Experience in banking or financial services environments

• Exposure to:

• ACF2 or Top Secret (nice to have)

• SIEM tools (Splunk, QRadar, etc.)

• Experience with:

• Automation (REXX, Python)

• Identity governance tools

• Experience with enterprise‑wide security transformations or IAM integration

• Knowledge of Zero Trust or modern security frameworks

• Experience supporting regulatory audits in large enterprises

Being You

Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single‑handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.

What You Can Expect

With state‑of‑the‑art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well‑being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company‑wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non‑profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.

Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.